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ACCESS CONTROL UNIT INTERFACE peripherals, and a host processor. A daughter card is coupled 

BACKGROUND OF THE INVENTION between the fingerprint scanner and the host processor. The 

daughter card handles real-time and interactive access con- 

1. Field of the Invention trol cvcots ^ host processor can be any commercially 
The present invention is directed to the field of access 5 available processor 

control and, in particular, to access control with biometric fe one embodiinenl> ^ daughter card bas „ access 

technology. control interface processor. The access control interface 

2. Related Art processor includes a display interface module, a keyboard 
Access control systems are used to limit access to selected mo dule, a Wiegand interface module, a finger detect inter- 
individuals. Some of these systems use biometric tcchnolo- to f ace module, a LED interface module, and a serial commu- 
gies to determine whether access for an individual will be nication module. 

granted or denied. A biometric is a unique, measurable ^ Qt mvention ides for a act 

characteristic or trait of a human bong for automatically desi confl ration . ^ughler card and host processor 

recogmzing or verifying identity. For instance, fingerprint be kd jn a act sUcked configuration . nis 

biometrics are largely regarded as an accurate method of is me access control uni , tQ fee mstaUed ^ a varie , of 

biometric identification and verification See, e.g. environmenls without using a great deal of space. User 

Roethenbaugh, G. Ed., Bwmetncs Exp lamed GntemaUonal enrollment and acccss m ided for m a conve . 

Computer Security Association: Carlisle, Pa. 1998), pages n j en( VSL ^a C 

1-34. which is herein incorporated by reference in its _ , , 

entiretv 20 Furthermore, the present invention provides an access 

. 4 , /A «,v , -a „ 4 control interface between a fingerprint scanner, camera, and 

Access control units (ACUs) may be placed locally to . . - , * .f .. . . /r ,^^\ u * 

_ . . A . ; *i_ • j- -j i j j * peripherals, and any commercially available (COTS) host 

perform a biometric analysis on the individual, and deter- r r ' . .-, r \ a • 

r . , it _ .„ • , . j . , „ processor. This provides for greater flexibility m access 

mine whether access will be granted or denied. Additionally, r t , . / . j - i 4 w * „ 

. , A ^, TT L j* j * * C4 . control system design and implementation. Various com- 

lf required, an ACU may be used to document images or the . M J , , & u u * * j c 

^ 4 i- * i_ u j • j mercially available processors can be chosen to meet air- 

access applicant. When an access applicant has been denied 25 _ , ' r j. iJT - ir-i- 

f r f r * . i „■ k i . ferent performance and/or cost needs. For example, familiar, 

access, images of an access applicant may be desirable to . *\ . t , , , , n 

, t & . ♦ ■ u • / * a f u u low-cost host processors may be chosen to lower overall 

determine whether the system is being tested for breach. A 4 *L? 4L i_ u -i t_i 

„ r r * j * li_ system cost. Off-the-shelf processors may be available in 

Furthermore, images of an access applicant may be desirable / ^ f j *• 

6 1 . , u u .j j u- large quantities to support large production runs, 

when an access applicant has been accepted and is being & ^ & f 

granted access (i.e., the door is open), in order to determine 30 According to a further feature, the present invention 

whether an access applicant is gaining access and passing it provides for interconnection with a number of interface 

to another ("pass forward"), whether multiple people are tv P es > including a Wiegand interface, a serial port interface, 

obtaining access, or whether property is being improperly ™ d an Ethernet port interface. This provides for flexibility 

transported through the door. in interconnection environments. Interfacing directly with 

An access control unit takes a live scan of an individual's 35 Ethernet provides for high rates of fingerprint data transfer, 

fingerprint with a fingerprint scanner. A host processor Further embodiments, features, and advantages of the 

processes the detected fingerprint image. Such live scan present inventions, as well as the structure and operation of 

ability is an important tool for access control, allowing for the various embodiments of the present invention, are 

rapid capture and transmission of fingerprints, and rapid described in detail below with reference to the accompany- 

fingerprint identification. Prior to the present invention, 40 ing drawings, 
however, the host processor in an ACU was limited to a 

customized piece of logic, such as, an application specific- BRIEF DESCRIPTION OF THE FIGURES 

integrated circuit (ASIC) or a digital signal processor (DSP). ^ accompanymg drawings, which are incorporated 

An ACU was also not a generally compact device. herein ^ form a part of me spec ifi cat i 0Q? illustrate the 

What is needed is a compact ACU interface which is 45 presen t invention and, together with the description, further 

compatible with a commercial off-the-shelf (COTS) serve to explain the principles of the invention and to enable 

processor, such as, a PENTIUM processor. Such a COTS a per son skilled in the pertinent art to make and use the 

processor is more likely to be familiar to an ACU customer, invention, 

and able to operate a common commercial operating system j Q ^ drawings* 

such as WINDOWS or LINUX, thereby increasing customer 50 ™„ t , , ^ 

acceptance throughout the life of the ACU from the time of FIG ; 1 sho ™ aa exam P le embodiment of an access 

purchase through installation and maintenance. A COTS contro1 ™ li of P reseDt invention; 

processor may be more widely available at an overall FIG- shows a block diagram illustrating an embodi- 

competitive price and performance compared to customized ment of the present invention; 

logic. A compact ACU also allows it to be incorporated into 55 FIG. 2B shows an example configuration of the present 

a wider range of access control applications, such as, prison invention; 

security points and entry/exit locations in a secure building F ig. 3 shows an example detailed block diagram illus- 

or area, and allows it to be integrated more easily with tratmg ^ embodiment of the present invention; 

existing computer systems. Furthermore it is desirable to BG 4 &hQWS Q u mQd ^ s [n m embodiment of the 

have an ACU that is compatible with a broader range and ™ ^ ^ of ^ { inventi 
variety of communications interfaces. The placement of 

intelligence in a small package at access points enables local ™™ „ A „ m * , 

and dLibuted alarms for tamper detection and breach. FIGS - 5A ', 5B •? d 5C show ex c am P le °P eraUon of an 

access control interlace processor or the present invention. 

SUMMARY OF THE INVENTION 65 ^ present j nven tion will now be described with refer- 

The present invention is directed to an access control unit ence to the accompanying drawings. In the drawings, like 

interface between a fingerprint scanner, a camera, and reference numbers indicate identical or functionally similar 
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elements. Additionally, the left-most digit(s) of a reference Description in these terms is provided for convenience 

number identifies the drawing in which the reference mim- only. It is not intended that the invention be limited to 

ber first appears. application in this example environment. In fact, after read- 

DETAILED DESCRIPTION OF THE the description, it will become apparent to a 

PDBCRPDcn BMunniMPNT<! 5 person stalled in the relevant art how to implement the 

PREFERRED EMBODIMENTS invention in alternative environments known now or devel- 

Overview ana terminology , . , - 

The present invention is directed to an interface between "P 6 ia „ e . . I?' ., , , r 

a fingerprint scanner and a host processor in an access p 0 "'™ 1 U . mt ,n e ' face . . . .. 

control unit. The host processor be any commercially . Structural nnplementations for an access control unit 

., t r j u j- * j u« interface are described at a high-level, and at a more detailed 

available processor. In a preferred embodiment, a daughter 10 implementations are described herein 

card is coupled beWreen the fingerprint scanner and various for mMy6 ^ Me no( limitin In ^ 

accessories and the host processor. The daughter card access ^ ^ desaibed ^ can 

handles real-Ume and mteracUve access control events. In a bg achUved usi a numbef of structural 

preferred embodiment, the daughter card includes an access plementationS( Lrdware, firmware, software, 

control interface processor. Tbe access control nterface 15 » combination thereof. The details of such structural 

processor performs a number of asks including interfacing p i ementad ons will be apparent to persons skilled in the 

the host processor with various I/O devices and ports. ^ blxA Qn me \ achmgs ^ ntaine d herein. 

• T ° T?u ClCa u y fi m ^ V ^ n ! *Zt ^ Tv. FIG. 2A illustrates an example block diagram of a pre- 

is made throughout the specification to adhere to the fol- fcrred embo(liinent of ^ F m mvcn ti on . Access control 

lowing term definitions as consistently as possible. ^ 2m ^ a hos( ^ 210 a daughter ^ 220 

The terms commercially available processor and a . t -ino 1 • • i 7^ i^a j 

"commercial-off-the-shelf (COTS) processor" are used » tap™! *™« 108 electrical connections 230 and 

interchangeably to refer to any processing unit available for « b « ervatlon 1 ca ™ r * 25 ?' " 0St p j°£T r 2 * ° 18 

general purpose or specific purpose computing. For bi-directionally coupled to daughter card 220 through elec- 

example, a COTS processor can include, but is not limited tncal connections 230. 

to, a PC-104 processor, a PENTIUM processor type sold by 25 FIG. 2B shows an example access control unit daughter 

Intel Corporation or a PowerPC processor sold by Motorola. card and host processor physical connection configuration 

A COTS processor is also intended to broadly refer to any 240. Configuration 240 includes a host processor 210, a 

combination of software, firmware, and/or hardware, daughter card 220, a fingerprint scanner 108, electrical 

including, but not limited to, DSPs, RISCs (Reduced connections 230, and an ACU case 102. As illustrated, host 

Instruction Set Computers), and microprocessors. 30 processor 210, daughter card 220, and electrical connections 

Example Access Control Unit 230 form a substantially stacked configuration in ACU case 

FIG. 1 illustrates a frontal perspective view of an embodi- 102. This is a compact arrangement, which allows for a 

ment of an access control unit 100. Access control unit 100 compact size for ACU case 102. In one example, daughter 

includes an ACU case 102, a display 104, a keypad 106, a card 220 is fabricated on a circuit board approximately 3.5 

fingerprint scanner 108, a locked LED display 110, and a 35 inchesx3.5 inches or less. 

unlocked LED display 112. Access control unit 100 is not FIG. 3 shows a more detailed block diagram of an 

limited to this configuration,- but may also include other embodiment of an access control unit. The access control 

combinations of I/O devices and ports as would be known by unit of FIG. 3 includes a host processor 210, a daughter card 

persons skilled in the relevant art(s), based upon the teach- 220, a finger detector 302, a Wiegand interface 304, a LED 

ings herein. 40 display 306, a textual display 308, a keypad 310, a serial port 

ACU case 102 provides a housing for some of the 312, a fingerprint scanner 108, an Ethernet port 314, a door 

components necessary to operate access control unit 100, relay 340, a RTE (Request to Exit) 342, an alarm 344, a 

and presents the I/O devices and ports of access control unit tamper detector 348, and a storage mass memory 350. 

100. Display 104 provides status information to an indi- Daughter card 220 farther includes an access control inter- 

vidual accessing the access control unit 100. Display 104 45 face processor 316, an interface logic 318, a keyboard scan 

may be an LCD display, or any other suitable display device. controller 320, a serial port drivers 322, a UART (Universal 

Keypad 106 allows an individual to input an access code to Asynchronous Receiver Transmitter) 324, a storage device 

the access control unit 100. For example, keypad 106 allows 326, a frame grabber 328, a frame memory 330, an I 2 C 

for 1:1 verification or l:some identification to occur within (Inter-IC) interface 332, an Ethernet interface 334, a bus 

the unit. Keypad 106 may be any suitable type of keypad, so 336, and a relay control and digital input 346. 

keyboard, or other key entry device. Access control interface processor 316 is coupled to bus 

Fingerprint scanner 108 captures a user's fingerprint. 336, finger detector 302, Wiegand interface 304, LED dis- 

Fingerprint scanner 108 may be any suitable type of finger- play 306, textual display 308, keyboard scan controller 320, 

print scanner, known to persons skilled in the relevant art(s). interface logic 318, and UART 324. 

Locked LED display 110 indicates that access is currently 55 Keyboard scan controller 320 is coupled to keypad 310 

being denied. Unlocked LED display 112 indicates that a and access control interface processor 316. 

user is currently being granted access. The present invention Serial port drivers 322 is coupled to serial port 312 and 

is not limited to the use of LEDs, but may also include other UART 324. 

suitable indicator devices known to those skilled in the UART 324 is coupled to access control interface proces- 
relevant arts. Additional visual, audible, or other types of 60 sor 316, serial port drivers 322, interface logic 318, and bus 

indicators may be used to denote further access control unit 336. 

status details. Interface logic 318 is coupled to access control interface 
The present invention is described in terms of this processor 316, UART 324, storage device 326, frame grab- 
example access control unit environment. However, the ber 328, frame memory 330, I 2 C interface 332, Ethernet 
present invention can be used in any access control interface 65 interface 334, and bus 336. 

where a daughtercard couples a biometric input device, I/O Storage device 326 is coupled to interface logic 318 and 

device(s) and other interfaces with a COTS processor. bus 336. 
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Frame grabber 328 is coupled to fingerprint scanner 108, 210 accesses frame memory 330 to obtain captured finger- 
interface logic 318, frame memory 330, 1 2 C interface 332, print images and access applicant images, through bus 336. 
and observation camera 250. In an embodiment, frame grabber 328 comprises an 

Frame memory 330 is coupled to interface logic 318, integrated circuit chip, such as a BT827, which accepts 

frame grabber 328, and bus 336. s video sources to be digitized, stored, and analyzed. Such 

* I 2 C interface 332 is coupled to interface logic 318, frame sources include fingerprint scanner 108 and observation 

grabber 328, and bus 336. camera 250. Control and status registers within an BT827 

Ethernet interface 334 is coupled to interface logic 318, can only be accessed over an I*C interface. I 2 C interface 332 

Ethernet port 318, and bus 336. allows host processor 210 to access these registers through 

Relay control and digital input 346 is coupled to door 10 bus 336. Other suitable frame grabbers and associated 

relay 340, RTE 342, alarm 344, tamper detector 348, and bus circuits can be used as would be apparent to person(s) skilled 

336. in the relevant art(s) given this description. 

Host processor 210 is coupled through bus 336 to access UART 324 provides a communications interface between 

control interface processor 316, interface logic 318, UART host processor 210 and serial drivers 322. In a preferred 

324, storage device 326, frame memory 330, 1 2 C interface is embodiment, UART 324 provides an ISA interface to serial 

332, Ethernet interface 334, and relay control and digital drivers 323. UART 324 also provides a communications 

input 346. In alternative embodiments, fewer devices, or interface between host processor 210 and access control 

additional devices are coupled through bus 336 to host interface processor 316. In a preferred embodiment, UART 

processor 210. 324 provides an ISA interface between host processor 210 

Storage mass memory 350 is coupled through bus 336 to 20 and access control interface processor 316. UARTs are well 

access control interface processor 316, interface logic 318, known to those skilled in the relevant art(s). 

UART 324, storage device 326, frame memory 330, I 2 C Storage device 326 provides for data storage on the 

interface 332, Ethernet interface 334, and relay control and daughter card 220. In a preferred embodiment, storage 

digital input 346. In alternative embodiments, fewer devices, device 326 is a flash memory device designed to emulate a 

or additional devices are coupled through bus 336 to storage 25 hard drive in the manner that a host processor, such as a 

mass memory 350. personal computer, accesses data. This provides for conve- 

Operation nient access by commercially available processors. Interface 

Host processor 210 of FIG. 3 performs high-level control logic 318 decodes addresses provided by host processor 210 

functions for an access control unit. For instance, host over bus 336, and provides the decoded addresses to storage 

processor 210 provides the necessary control signals to 30 device 326. Storage device 326 outputs data onto bus 336. 

daughter card 220 to cause a fingerprint image to be cap- Door relay 340 is a relay or switch that allows an access 

tured. Host processor 210 receives the captured fingerprint door to be opened. In an embodiment, relay control and 

image and matches it to one or more previously stored digital input 346 provides the control signal that activates 

fingerprints. One-to-one or one -to -many matching algo- door relay 340. 

rithms can be used to determine a match. Host processor 210 35 RTE 342 allows an access door to be opened from the 

comprises any commercially available processor. In a pre- inside, rather than the side of the door monitored by an 

ferred embodiment, host processor 210 comprises a PC-104 access control unit. In an embodiment, when accessed, RTE 

processor. 342 provides a signal to relay control and digital input 346 

Host processor 210 interfaces with daughter card 220 indicating a request to exit, 

through bus 336. In a preferred embodiment, bus 336 40 Alarm 344 provides an alarm indication during specified 

comprises an ISA (Industry Standard Architecture) bus, situations. For instance, alarm 344 may be active when a 

which is well known to those skilled in the relevant art(s). door is left open for more than a specified amount of time, 

Finger detector 302, shown in FIG. 3, detects when a or when an attempt is made to force a door open. Alarm 344 

finger is present at fingerprint scanner 108. In one example receives an activation signal from relay control and digital 

embodiment, finger detector 302 includes an interrupter 45 input 346. 

beam. In alternative embodiments, finger detector 302 may Tamper detector 348 detects when an access control unit 

detect skin resistance, or measure characteristics of light is being tampered with. For instance, tamper detector 348 

reflected off skin, in order to detect a live finger, as would be may provide an active signal when an improper attempt is 

understood by persons skilled in the relevant art(s), made to open the access control unit. Tamper detector 348 

Fingerprint scanner 108 images a user's fingerprint. In an 50 provides a signal to relay control and digital input 346 that 

embodiment, fingerprint scanner 108 outputs fingerprint indicates tampering. 

data representative of the captured fingerprint image in a Relay control and digital input 346 provides a control 

video format. In general, any known fingerprint scanner can signal to door relay 340, and provides and receives other 

be used. signals. In an embodiment, relay control and digital input 

Observation camera 250 captures images of an access 55 346 receives signals from tamper detector 348, RTE 342, 

applicant when desired. Images may be captured when and provides a signal to alarm 344. In other embodiments, 

access is denied or granted. In an embodiment, observation relay control and digital input 346 may receive additional 

camera 250 outputs images captured at periodic intervals, in input signals, or have fewer input signals, and provide 

a video format. In general, any suitable camera may be used. additional or fewer output signals. In embodiments, relay 

Frame grabber 328, frame memory 330, and I 2 C interface 60 control and digital input 346 provides output signals to, and 

332 operate together to capture fingerprint images of fin- receives input signals from host processor 210 through bus 

gerprint scanner 108 and access applicant images of obser- 336. 

vation camera 250. In an embodiment, frame grabber 328 Storage mass memory 350 provides mass storage for host 

digitizes the video signals output by fingerprint scanner 108 processor 210 and daughter card 220. In an embodiment, 

and observation camera 250. A captured image is stored in 65 storage mass memory 350 stores fingerprint images. In an 

frame memory 330. In one example, frame memory 330 is alternative embodiment, storage mass memory 350 stores 

a static random access memory (SRAM). Host processor images captured periodically by observation camera 250 
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until they can be transmitted from the access control unit 404, a Wiegand interface module 406, a LED interface 

through Ethernet port 314. Storage mass memory 350 may module 408, a serial communication module 410, and a 

provide these functions, combinations of these functions, finger detect module 412. 

and other functions well known to persons skilled in the Display interface module 402 couples textual display 308 
relevant art(s). 5 with host processor 210. In an embodiment, display inter- 
Input/Output Devices and Interfaces face module 402 receives display commands with associated 
In one embodiment, Wiegand interface 304 allows the data from host processor 210, and allows host processor 210 
present invention to interface with a Wiegand communica- <° ^ t0 clear > and to conlro1 me cursor of textual 
tions line display 308. 
TCn v i a/ w ■ , » f ™ 4 . * *u * Keyboard interface module 404 interfaces keyboard scan 
L£Dc^pla y 306 mcludesLEDs matmdicate 10 cont J Uer 320 wim host processor 210. In an embodiment, 
is curren ly being panted or denied. keyboaid interface module 404 may allow the transmitting 
Tfextad display 308 provides status information to an of solidted Qr MMlicited ke d m t from k 5oard 
individual accessing the access control unit. In a preferred scan 320 to host processor 210. 
embodiment, textual display 308 is an LCD display. Other Wiegand interface module 406 couples Wiegand interface 
textual displays are well known to persons skilled in the 15 304 an£ j host processor 210, allowing data to be transmitted 
relevant art(s). and received through Wiegand interface 304. 

Keypad 310 allows an individual to input an access code LED interface module 408 couples LED display 306 and 

to the access control unit 100, allowing for 1:1 verification host processor 210. In an embodiment, LED interface mod- 

or l:some identification to occur within the unit. In ule 408 allows host processor 210 to cause LED display 306 

embodiments, there may be more than one level of access. 20 to illuminate LEDs indicating that access has been granted 

For instance, an embodiment may have two levels of access: and that access has been denied. 

user access and system administration access. Serial communication module 410 couples serial port 

Keyboard scan controller 320 scans keypad 310 for key drivers 322 and host processor 210. In an embodiment, serial 

data. Suitable keyboard scan controllers are known to per- communications module 410 allows host processor 210 to 

sons skilled in the relevant art(s). 25 send serial data to, and receive serial data from serial port 

Serial port 312 provides a serial interface to an access drivers 322 through UART 324. 
control unit, supporting multiple communication protocols. Finger detect module 412 couples finger detector 302 and 

These include, but are not limited to, RS-232, RS-422, and host processor 210. In an embodiment, finger detect module 

RS-485. Serial port drivers 322 convert data to the appro- 412 allows finger detector 302 to provide signals to host 

priate electrical signal levels. Suitable serial port drivers are 30 processor 210 indicating that a finger is present, or that a 

known to persons skilled in the relevant art(s). finger is not present. 

Ethernet interface 334 allows an access control unit to FIGS. 5A-5C show flowcharts providing detailed opera- 
transmit and receive large quantities of data at high speed, tional steps of an example embodiment of access control 
such as fingerprint images and observation images. In an interface processor 316. The steps of FIGS. 5A-5C may be 
embodiment, interface logic 318 decodes controls signals 35 implemented in hardware, firmware, software, or a combi- 
provided by host computer 210 through bus 336, to access nation thereof. Other structural embodiments will be appar- 
Ethernet interface 334. Ethernet port 314 provides an Eth- ent to persons skilled in the relevant art(s) based on the 
emet connection for Ethernet interface 334. discussion contained herein. These steps are described in 
Interface Logic detail below. 

In an embodiment, interface logic 318 decodes address 40 In step 500 in FIG. 5 A, operation proceeds to step 508. 
and control signals from host processor 210 through bus Operation of access control interface processor 316 starts 

336. This allows host processor 210 to access UART 324, at step 502. Operation proceeds to step 504. 
storage device 326, I*C interface 332, and Ethernet interface In step 504, access control interface processor 316 is 

334. Interface logic 318 also provides logic which enables initialized. Operation proceeds to step 506. 
frame grabber 328 to write data into storage device 326 . 45 In step 506, the state of access control interface processor 

Additionally, interface logic 318 provides logic to disable 316 is set to "Start of Packet". Operation proceeds to step 

frame grabber 328 from writing to storage device 326, and 508. 

to allow host processor 210 access to storage device 326. In step 508, keypad scan controller 320 is processed by 

Interface logic 318 also provides logic for configuring the access control interface processor 316, determining whether 

protocol of serial port drivers 322. 50 keypad data has been entered at keypad 310, and the 

Interface logic 318 can be comprised of hardware, resulting data is sent to the host computer 210. Operation 

firmware, software, or a combination thereof. Preferably, proceeds to step 510. 

interface logic 318 is comprised of at least one complex In step 510, finger detector 302 is processed by access 
programmable logic device (CPLD), such as those provided control interface processor 316, determining whether a fin- 
by Cypress Semiconductor. CPLDs at least provide for a 55 ger has been detected, and the result is sent to host computer 
high level of logic density. 210. Operation proceeds to step 512. 
Access Control Interface Processor In step 512, the state of access control interface processor 
In an embodiment, access control interface processor 316 316 is determined by access control interface processor 316. 
provides for lower level processing and interfacing functions If the state is equal to "Start of Packet", operation proceeds 
on daughter card 220, For instance, access control interface 60 to step 514. If the state is not equal to "Start of Packet", 
processor 316 receives instructions from host processor 210 operation proceeds to step 518. 

through bus 336, and transmits responses (solicited and In step 514, access control interface processor 316 deter- 

unsolicited) to host processor 210 through bus 336. Access mines whether the start of packet code has been received 

control interface processor 316 may provide additional and from host computer 210. If the start of packet code has been 

alternative functions. As shown in FIG. 4, in an 65 received, operation proceeds to step 520. If the start of 

embodiment, access control interface processor 316 includes packet code has not been received, operation proceeds to 

a display interface module 402, a keyboard interface module step 516. 
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In step 516, operation proceeds to step 500, indicated by 
an "A". 

In step 518, operation proceeds to step 524 in FIG. 5B, 
indicated by a "B". 

In step 520, the state of access control interface processor 
316 is set to "Get Command"- Operation proceeds to step 
522, indicated by an "A". 

In step 522, operation proceeds to step 500. 

In step 524 in FIG. 5B, operation proceeds to step 526. 

In step 526, access control interface processor 316 deter- 
mines whether the state is set equal to "Get Command*'. If 
the state is equal to "Get Command", access control inter- 
face processor receives data from host processor 210, and 
operation proceeds to step 528. If the state is not equal to 
"Get Command", operation proceeds to step 534. 

In step 528, access control interface processor 316 deter- 
mines whether valid data is received. If valid data is 
received, operation proceeds to step 532. If valid data is not 
received, operation proceeds to step 530. 

In step 530, the state of access control interface processor 
316 is set to "Start of Packet" by access control interface 
processor 316. Operation proceeds to step 500 in FIG. 5 A, 
indicated by an "A". 

In step 532, access control interface processor 316 sets the 
present command equal to the data received. Operation 
proceeds to step 538. 

In step 534, operation proceeds to step 550 in FIG. 5C, 
indicated by a "C". 

In step 536, operation proceeds to step 500 in FIG. 5 A, 
indicated by an "A". 

In step 538, access control interface processor 316 deter- 
mines whether the present command has data associated 
with it. If the present command does have data associated 
with it, operation proceeds to step 540. If the present 
command does not have data associated with it, operation 
proceeds to step 542. 

In step 540, the state of access control interface processor 
316 is set to "Get Data" by access control interface processor 
316. Operation proceeds to step 544. 

In step 542, the present command is processed. Operation 
proceeds to step 546. 

In step 544, operation proceeds to step 500 in FIG. 5A, 
indicated by an "A". 

In step 546, the state of access control interface processor 
316 is set to "Start of Packer by access control interface 
processor 316. Operation proceeds to step 548. 

In step 548, operation proceeds to step 500 in FIG. 5 A, 
indicated by an In step 550 in FIG. 5C, operation proceeds 
to step 552. 

In step 552, access control interface processor 316 deter- 
mines whether the state of access control interface processor 
316 is set to "Get Data". If the state is set to "Get Data", 
operation proceeds to step 554. If the state is not set to "Get 
Data", operation proceeds to 558. 

In step 554, access control interface processor 316 deter- 
mines whether all data has been collected from the present 
command. If all data has been collected from the present 
command, operation proceeds to step 560. If all data has not 
been collected from the present command, operation pro- 
ceeds to step 556. 

In step 556, operation proceeds to step 500 in FIG. 5A, 
indicated by an "A". 

In step 558, access control interface processor 316 sets the 
state of access control interface processor 316 to "Start of 
Packet". Operation proceeds to step 566. 

In step 560, access control interface processor 316 pro- 
cesses the present command. Operation proceeds to step 
562. 



20 



25 



In step 562, access control interface processor 316 sets the 
state of access control interface processor 316 to "Start of 
Packet". Operation proceeds to step 564. 

In step 564, operation proceeds to step 500 in FIG, 5A, 
5 indicated by an "A". 

In step 566, operation proceeds to step 500 in FIG. 5 A, 
indicated by an "A". 
Conclusion 

While various embodiments of the present invention have 
10 been described above, it should be understood that they have 
been presented by way of example only, and not limitation. 
It will be apparent to persons skilled in the relevant art that 
various changes in form and detail can be made therein 
without departing from the spirit and scope of the invention. 
15 Thus, the breadth and scope of the present invention should 
not be limited by any of the above-described exemplary 
embodiments, but should be defined only in accordance with 
the following claims and their equivalents. 
What is claimed is: 

1. an access control unit, comprising: 
a fingerprint scanner; 
a host processor; and 

a daughter card coupled between the fingerprint scanner 

and the host processor; 
wherein said daughter card and host processor are con- 
figured in a stacked configuration; 
wherein said daughter card receives fingerprint image 
data from said fingerprint scanner and stores said 
30 received fingerprint data; and 

wheren said daughter card transmits said received finger- 
print image data to said host processor, wherein the host 
processor can be any commercially available proces- 
sor; 

35 wherein said daughter card further comprises 
an access control interface processor; and 
wherein said access control interface processor 
receives instructions from said host processor and 
transmits responses to said host processor; and 
40 wherein said access control interface processor com- 
prises; 

a display interface; 
a keyboard module; 
a Wiegand interface module; 
45 a finger detect interface module; 

an indicator interface module; and 
a serial communication module. 

2. The access control unit of claim 1, wherein said 
daughter card handles real-time and interactive access con- 
so trol events. 

3. The access control unit of claim 2, wherein said 
daughter card includes an access control interface processor. 

4. The access control unit of claim 1, wherein said 
daughter card comprises: 

55 an access control interface processor; 
a keyboard scan controller; 
a serial port driver; 
a frame grabber; 
a U ART; 

60 4 . ■ 

a storage unit; 
a frame memory unit; 
an I 2 C interface; 
a relay control and digital input; 
65 an Ethernet interface; and 

interface logic, wherein said daughter card is coupled 
between at least one device and a host processor. 
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5. The access control unit of claim 1, wherein said 
daughter card is coupled between an Ethernet port and said 
host processor. 

6. The access control unit of claim 1, wherein said 
daughter card is coupled between a Wiegand interface and 
said host processor. 

7. The access control unit of claim 1, wherein said 
daughter card is coupled between at least one I/O device and 
said host processor. 

8. The access control unit of claim 7, wherein said at least 
one 1/0 device comprises: 

a keypad; and 
a display. 

9. The access control unit of claim 1, wherein said 
daughter card is coupled between a finger detector and said 
host processor. 

10. The access control unit of claim 1, wherein said 
daughter card is coupled between a serial port and said host 
processor. 

11. The access control unit of claim 1, wherein said 
daughter card and host processor are electrically connected 

. and arranged in a compact stacked configuration. 

12. The access control unit of claim 1, wherein said 
display interface module receives a data display command 
from said host processor and sends associated data to a 
display. 

13. The access control unit of claim 1, wherein said 
keyboard module transmits solicited and non-solicited key- 
pad data to said host processor. 

14. The access control unit of claim 1, wherein said 
Wiegand interface module translates data from said host 
processor and sends the translated data to a Wiegand inter- 
face. 

15. The access control unit of claim 1, wherein said finger 
detect interface module allows a finger detector to provide 
signals to said host processor indicating that a finger is 
present, or that a finger is not present. 

16. The access control unit of claim 1, wherein said LED 
interface module allows said host processor to illuminate 
LEDs indicating that access has been granted and that access 
has been denied. 

17. The access control unit of claim 1, wherein said serial 
communication module allows said host processor to send 
serial data to, and receive serial data from serial port drivers. 

18. The access control unit of claim 1, wherein said 
daughter card is coupled between an observation camera and 
said host processor. 

19. The access control unit of claim 1, wherein said 
daughter card is coupled between a tamper detector and said 
host processor. 

20. The access control unit of claim 1, wherein said 
daughter card is coupled between a door relay and said host 
processor. 

21. The access control unit of claim 1, wherein said 
daughter card is coupled between a RTE and said host 
processor. 

22. The access control unit of claim 1, wherein said 
daughter card is coupled between an alarm and said host 
processor. 

23. The access control unit of claim 1, wherein said 
daughter card and said host processor are coupled to a mass 
storage device. 

24. The access control unit of claim 1, wherein said 
daughter card communicates with the host processor across 
an industry standard bus. 



10 



15 



20 



30 



35 



45 



50 



55 



60 



65 



25. The access control unit of claim 20, wherein said 
daughter card includes relay control. 

26. The access control unit of claim 1, wherein said 
daughter card is disposed in a first plane and said host 
processor is disposed in a second plane, wherein said first 
plane and said second plane are substantially parallel; 

wherein said daughter card and said host processor are 
connected by an electrical connection, wherein said 
daughter card, said electrical connection, and said host 
processor substantially form a U-shape; and 

wherein said daughter card and said host processor each 
comprise a circuit board approximately 3.5 inches by 
3.5 inches or less. 

27. The access control unit of claim 1, wherein said 
daughter card handles real-time and interactive access con- 
trol events, wherein said daughter card includes: 

an access control interface processor; 

a keyboard scan controller coupled to a keypad; 

a serial port driver; 

a frame grabber; 

aUART; 

a storage unit; 

a frame memory unit; 

an I 2 C interface; 

a relay control and digital input module that is coupled to 
a tamper detector, a door relay, an RTE (request to exit), 
and an alarm; 

an Ethernet interface coupled to an Ethernet port; and 

interface logic; 

wherein said daughter card is coupled to an observation 
camera; 

wherein said daughter card and said host processor are 

coupled to a mass storage device; 
wherein said access control interface processor includes: 

a display interface module that receives a data display 
command from said host processor and sends asso- 
ciated data to a display; 

a keyboard module that transmits solicited and non- 
solicited keypad data to said host processor; 

a Wiegand interface module that translates data from 
said host processor and sends the translated data to a 
Wiegand interface; 

a finger detect interface module that allows a finger 
detector to provide signals to said host processor 
indicating that a finger is present, or that a finger is 
not present; 

a LED interface module that allows said host processor 
to illuminate LEDs indicating that access has been 
granted and that access has been denied; and 

a serial communication module that allows said host 
processor to send serial data to, and receive serial 
data from said serial port driver. 

28. An access control interface processor comprising: 
a display interface module; 

a keyboard module; 
a Wiegand interface module; 
a finger detect interface module; 
a LED interface module; and 
a serial communication module; 

wherein said access control interface is disposed on a 
daughter card; 

wherein the daughter card is coupled between a finger- 
print scanner and a host processor; 
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wherein the host processor can be any commercially 
available processor; 

wherein the daughter card and host processor are config- 
ured in an access control unit case; and 

wherein said access control interface processor receives 
instructions from the host processor and transmits 
responses to the host processor. 

29. An access control unit comprising: 

an access control unit case; 

a fingerprint scanner accessible on a surface of said access 

control unit case; 
a host processor; and 

a daughter card coupled between the fingerprint scanner 
and the host processor; 

wherein said daughter card and host processor are con- 
figured in a stacked configuration in said access control 
unit case; 

wherein said daughter card receives fingerprint image 
data from said fingerprint scanner and stores said 
received fingerprint image data; and 
wherein said daughter card transmits said received fin- 
gerprint image data to said host processor; 
wherein said daughter card further comprises 
an access control interface processor; and 
wherein said access control interface processor 
receives instructions from said host processor and 
transmits responses to said host processor; and 
wherein said access control interface processor com- 
prises 

a display interface; 

a keyboard module; 

a Wiegand interface module; 

a finger detect interface module; 

an indicator interface module; and 

a serial communication module. 
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30. The access control unit of claim 29, further compris- 
ing: 

an observation camera, said daughter card coupled 
between said observation camera and said host proces- 
sor. 

31. A method for access control in a device, the device 
comprising: 

a fingerprint scanner; 
a host processor; 

wherein the host processor can be any commercially 

available processor; and 
a daughter card that comprises; 

an access control interface processor; and 
wherein said access control interface processor 
receives instructions from said host processor and 
transmits responses to said host processor; 
wherein said access control interface processor com- 
prises 

a display interface; 

a keyboard module; 

a Wiegand interface module; 

a finger detect interface module; 

an indicator interface module; and 

a serial communication module; 

said method comprising the steps of: 

coupling the daughter card to the host processor; 

coupling the fingerprint scanner to the daughter 
card; 

stacking the daughter card and processor in an 
access control unit case; and 

coupling a signal representative of at least a 
portion of a fingerprint output from the finger- 
print scanner through the daughter card to the 
host processor. 
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